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(57) Abstract: A method of monitoring user usage patterns of a system, comprising the steps of: providing at least one state object 
( 1 80), the object including a profile representative of usa- usage; storing the state object at a client location ( 1 10); passing, to a central 
server (120), the state object with each subsequent interaction initiation; and receiving, from the central server, the state object along 
with the response (170) of the centtal server, wherein the profile is modified to reflect the interaction between client location and 
central server. The present invention provides a system and a method for monitoring user usage patterns, and is particularly suited 
to use in Internet and World Wide Web applications. 
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SYSTEM AND METHOD FOR MONITORING USAGE PATTERNS 



This Invention relates generally to the monitoring, recording and analysis of 
user activity. In particular the Invention relates to a method to create and store a 
profile of user activity and a system for doing so. 

Usage of the Intemet and tiie World-Wide-Web ("the web") has become 
commonplace. The web applies a client-server computing architecture, where data 
is stored on server machines and can be requested and transferred to a user's 
computer. Users generally request pages through the use of computer 
applications l<nown as "browsers", which are available for a range of computing 
devices, from desktop or personal, computers to mobile phones and Personal 
Digital Assistants (PDAs). The most common protocol used for communication 
between web clients and web servers Is the HyperText Transfer Protocol (HTTP). 
Documents are commonly transferred in Hypertext Markup Language (HTML) 
format that allows content to be expressed for display in the client web browser. 
Other data transfer formats are also in common use. HTML and other fomiats also 
allow the web browser to retrieve and embed computer language scripts, 
commonly termed Dynamic HyperText Markup Language (DHTML), ttiat allow 
additional client side programmable behaviour to be perfonned. 

HTTP was originally a stateless transfer method. In tiiat servers responded 
to each client request without relating tiie request to previous or subsequent 
requests. Internet standard RFC2029 Introduced an extension to the HTTP 
protocol tiiat allows the sender to store a state object on tiie client browser, and to 
retrieve and change this object during subsequent b^nsfers. This object, often 
referred to as a cookie, allows a stateful session (a session during which details 
are retained and shared between a dlent and server) between the client and 
server systems tiiat can be used to track and Identify further HTTP requests. This 
apprx)ach is In widespread use and allows managed client-server sessions, such 
as those found in web shopping systems. Cookies can be exchanged during any 
HTTP transfer, assuming the browser supports the capability or that tiie capability 
Is not disabled. This Includes the request and transfer of embedded HTML 
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document content, such as Image files. The scope of access by which servers can 
read and change cookie values can be controlled by Unlfonn Resource Locator 
(URL) path and Internet domain parameters. Cookies can be set and updated by 
seiver side processes or through DHTML, or similar, scripts embedded In web 
pages. 

Numerous Internet sites use cookies to personalise web page content, to 
remember user or password details for future s«e visits, for session management 
in on-line sales, to track web page usage and for the targeted delivery of content 
and advertisements. A common practice Is for a server to place a unique Identifier 
in the cookie on a client's machine when that machine first accesses the server. 
This allows the browser being used by the user to be identified during subsequent 
requests. If a user then submits personal Infonnatlon such as name, address or e- 
maii details, then, using this process, the identifier can be used to recognize the 
actual user. Additional information such as the IP address or domain name of the 
usei^s computer, the browser type and version, the client operating system, the 
Internet service provider, the local machine time and the URL of the data being 
accessed can also be collected and audited during the HTTP transfer. This allows 
geographical and demographical Infonnation, that can be used for user 
Identification and targeting of specific content, to be derived. The unique identifiers 
are also used to build aggregate historical details of URLs accessed and other 
such statistics. This Infonnation can then be used for marketing purposes to Infer 
the interests of users and for the generation of targeted web page content 

In some environments the use of unique cookies for user identification 
purposes is undesirable, because it reduces the anonymity with which users can 
access resources. Unique user identification is also unnecessary In many cases 
where the requirement Is to target content to users based on general 
characteristics, or profiles, of activity rather than on individual characteristics. The 
computational requirements to classify and extract details of users based on a 
single unique identifier, combined with the storage requirements to process past 
histories, may also be undesirable. Further, such processing cannot benefit from 
web page caches, or similar methods which speed access to site content, because 



wo 03/056430 PCT/GB02/Q5772 

3 

ail processing associated with the Identification of the user identifier must be 
perfonned by the originating web servers. 

In accordance with the present Invention there is provided a method of 
monitoring user usage patterns of a system, comprising the steps of: providing at 
least one state object, the object including a profile representative of user usage; 
storing the state object at a client location: passing, to a central sewer, the state 
object with each subsequent Interaction initiation; and receiving, from the central 
server, the state object along with the response of the central server, wherein the 
profile is modified to reflect the interaction between client location and central 
server. 

Preferably the profile includes at least one key and value-field pair. The key 
is an identifier of a particular interaction type, and the value-field comprises 
Infonnation relating to that interaction. In a simple embodiment tiie value-field 
would contain a count of the number of occurrences of tiiat particular interaction 
type. In addition to an interaction count the value-field may contain a time 
component denoting the time at which the count in the value-field was last 
modified and may also contain a second time component denoting the time that 
the key and value-field was firet created. In otiier implementations additional 
value-field components may be used for ottier operational purposes. 

Preferably, at least one state object is provided by the centiral server during 
the first interaction between the server and the dlent location. More preferably, 
the state object is provided as a part of the central server's response to a request 
for resources/infonnation submitted by the client location. 

Preferably, the modification of the profile includes; providing at least one 
further state object, the further state object comprising one or more key and value- 
field pain and storing at least one further state object at the client location. 
Preferably, at least one further state object is provided by tiie central server. The 
modification of a profile may include one or more of: Incrementing the count 
component of at least one key and value-field pair and modification of ttie time 
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components of at least one value-field; adding at least one further key and value- 
field pair to the profile; and removing one or more key and value-field pair from the 
profile 

Preferably, modification of the profile is canied out within the cential server. 
Alternatively, the modification of profiles is effected by one or more scripts within 
or included in information/resources pro>^ded to the client location by the central 
server, or one or more program executed at the client location, thus precluding 
manipulation of the profile by tiie server. 

In a preferred embodiment of the present Invention, interaction between the 
client location and the central server occurs via the internet, or other analogous 
means. 

Preferably, the central server further audits the state object provided to it. 
Preferably, the central server performs analysis on the audited profile in onier to 
direct services and/or infonnation suited to the profile to the client location. 

Also In accordance with the present invention there is provided a module 
configured to monitor user usage patterns within a system, the module resident 
within the system, the system comprising: a central server; and at least one client 
location; and the module comprising: means, within the central server, for 
generating at least one state object; and means for modifying a profile 
representative of system usage included In the state object to reflect interactions 
between the central server and dlent location, wherein the at least one state 
object is stored at the client tocation and is passed between the client location and 
central server during interactions. 

Preferably, the profile Indudes at least one key and value-field pair. In one 
embodiment the value-field contains an Interaction count Alternatively, the value- 
field contains an Interaction count and components relating to the time of last 
modification of the interaction count and/or the time of creation of the key and 
value-field. 
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In a preferred embodiment, the means for modifying Includes: means for 
incrementing a count which embodies the value-field of at least one key and value- 
field pair of the profile; means for adding at least one further key and value-field 
pair to the profile; and means for removing one or more key and value-field pair 
from the profile. Preferably, modification of the profile Is canied out within the 
central server. Alternatively, modification of the profile is effected through one or 
more scripts w'thin or included in infonnation/resources provided to the client 
location by the central sender, or by one or more program executed at the client 
location, thus precluding manipulation of the profile by the server. 

In a prefen-ed embodiment of the present Invention, interaction between the 
central server and client location occurs via the Internet, or other analogous 
means. 

Preferably, the server further includes means for auditing the profile and for 
analysing the audited profile of user usage, such that information/services suited 
thereto may be provided to the client location by the central server. 

As such, the present invention provides an automated system and method 
for the monitoring of user activity in environments where there is the exchange and 
storage of state information between client and server systems, such as web and 
Internet environments. The invention allows profiles of user activity to be built 
based on a range of parameters, which may include general classifications of 
page content previously viewed, the URLs of pages viewed, or other details that 
might be used to classify or sub-divide groups of web pages or web sites such as 
input from controls associated with one or more pages, e.g. buttons and active 
images (image maps). In a simple fonm the profile may comprise a histogram 
containing counts of web page types that have been accessed by a user. This 
information can then be used to determine the specific pattern of interests for a 
user and can be used to target advertisements, or other content forms, when a site 
is re-visited. 
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The site serving ttie web pages can also audit the profiles and these 
aggregations can be used to derive typical or average profiles for all users or 
groups of usere of a system. Profile aggregations at the server may include the 
consideration of demographic or other infonnatlon to create profile groupings. The 
invention is computationally efficient in that profile details are stored and updated 
on the client machine, rather than the server machine, and. unlike other systems, 
does not require database storage and lookup on tiie server side, since the 
profiles are readily available from the client machine. 

The invention also has the advantage thai in one Implementation where 
client side calculation Is used to generate and update the profiles, web pages can 
be accessed through web page caches or similar services and direct access to the 
originating server is not required. 

Since profile Information is held on the client machine It is possible that a 
user may modify details of the profile or remove it completely. Obfuscation or other 
means can be used to deny user access to the content held. However, in web 
environments, where very large volumes of users access resources, it is unlikely, 
that any en^ors deliberately introduced into profiles being considered would 
detrimentally effect system perfomiance. Indeed, statistical, or otiier metiiods, 
could be used to reduce potential sources of error. 

The previous discussion sets forUi a particular application in which there 
exist problems one or more of which are addressed by tiie present invention. 
However the techniques and principles discussed hereinafter apply to other 
environments that apply similar mechanisms. Similar methods, for example, could 
be used In any client and server computing environment, In card (or other fonus) 
of loyalty scheme, or to monitor any environment where state Infbmiation Is 
retained by a user and where this state can be updated as users access different 
features or areas of a system. 

A specific embodiment of tiie present Invention is now described, by way of 
example only, witti reference to ttie accompanying drawings. In which: 
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Figure 1 Is a block diagram showing one implementation of the system of 
the present Invention and Including a number of example communications within it; 
and 

Rgure 2a and 2b illustrate communications between server and user 
location during a first Interaction and during a repeat Interaction, respectively. 

The present Invention Is described In terms of an Internet web environment 
where cookies, or other state objects, are exchanged. Those skilled In the art will 
understand that the invention may be applied In a wide range of client and server 
computing environments -or a multitude of other business environments!. For 
example, the present invention may be implemented In any general computer or 
computing environment and in a multitude of business types and areas. 

Description in the above terms is for convenience only. It is not intended 
that the invention be limited in application to this example environment, as is 
stated above. 

In general, but not exclusive, temis the invention can be implemented as 
shown in Figure 1. Figure 1 shows a block diagram of a client computer 110 
mnning a web browser application 130, and a server computer 120 operating with 
a web page server application 140. The diagram represents the sequence 
associated with a web page transfer between the server 120 and client 110 
systems. A web page request 150 is sent to the web server 140, Identifying 
content/resources to be transfen^d. This Is done through the use of a URL. The 
web server locates the web page content/resources, or dynamically generates the 
content/resources, and a response 160 returns an HTTP result 170 to the 
requesting dleht. This result contains header Information according to the HTTP 
protocol, cookie information 180 and web page content 190. This initial request 
assumes that there is no cookie relating to this server already set on the client 
browser. 
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When the next request for web page content Is made from client to server 
the cookie Initially sent by the server may be sent, according to the guidelines of 
Internet standard RFC2029, back to the server. In this way cookies are transfeaed 
between client and server during subsequent requests, and between server and 
client during subsequent responses, as may be seen in Figures 2a and 2b. 
Additional cookies can be transfen-ed and the content of existing cookies can be 
changed or deleted. Changes to cookies can happen as part of the server 
processing as Indicated by the function boxes 202^04 In Figures 2a and 2b. 
Alternatively, such changes may be made as a part of tiie client side processing, 
in this situation, the changes may be Initiated by and/or canied out by a part of 
one of more scripts downloaded with the Infomiatlon/resources from the sender for 
example, as will be described further below. 

In the course of operation of the Invention, cookies, or groups of cookies, 
associated with particular areas of a web site are set and updated on the client 
browser. In one implementation of the invention, the value assodated with a 
cookie comprises a set of key and value-field elements or pairs. In another 
Implementation, multiple cookies could be used to retain the same infomnation. In 
general temis the key and value-field elements or pairs represent an identifier and 
a count indicating the number of times that resources associated with the identifier 
have been accessed. For example, the key identifier may relate to the URL of 
pages accessed, but would more generally relate to broad classifications 
associated with web page content, such as sport (or areas of sport, such as 
football, hockey, tennis), entertainment, news, science, etc. Generally the key 
Identifier will be an enumerated integer (although names could be used), where 
each Integer relates directly to a content type. Typically, profiles in the Invention 
will be represented in cookies In the following manner. 

PR0FILE=1 002/1 0:2345/5:7783/20 

The cookie contains a sequence of key / value-field pairs separated by a 
semi-colon. In this example there are three entries, for content classifications 
1002. 2345 and 7783, with value-fields comprising Interaction counts of 10. 5 and 
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20 respectively. Any suitable separator characters could be used between eacii 
i<ey and value-field or between tlie Icey and value-field pairs. When an HTTP 
request is made to a server, the client browser sends the existing profile as a part 
of the request 

Cookie: PROFILE=1002/10:2345/5:7783/20; 

The server can then amend value-fields as part of the HTTP response, 
where content types are already represented, as follows: 

Set-Cookie: PROFILE=1 002/1 0:2345/6:7783/20:path=/;explres=thursday, 
5-Dec.-2002 12:15:00;domain=acme.com 

or add to the profile where a new content type is presented In the 
response, as follows: 

Set-Cookie:PROFILE=1002/10:1899/1:2345/5:7783/20:path=/;expires= 
Thursday, 5-Dec.-2002 12:15:00;domain=acme.com 

In these cases the "domain" and "path" attributes are used to control the 
operatfonal scope of the cookies whilst the "expires" attribute is used to define the 
time at which the cookie becomes invalid, according to the standard defined in 
RFC2029. The "expires" attribute will generally be set sufficiently In the future such 
that the cookie never expires, or the attribute could be updated so that the cookie 
expires a given time period after the last access was performed. 

In an alternate implementation of the Invention, a time specifier may be 
added to the value-fields detailing the last time at which the key value-field pair 
was changed. In this case the cookie would take the following fomi: 



PROFILE=1002/10/TIME1:1899/1/TIME2:2345/5/TIME3:7783/20/TIME4 
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In another alternate Implementation of the Invention, a time of creation 
specifier may be added to each value-field. This specifier will detail the time at 
which the key and value-field was created. In this case the cookie would take the 
following fonn: 

PROFILE= 1 002/1 0/TIME1 ATIMEI creatlon:1 899/1/TIME2/riME2creatlon: 
2345/5/riME3/TIME3creation:7783/20/riME4/TIME4creation 

Of course, a time of creation spedfier may be added to value fields 
containing only interaction counts also. 

An efficient time representation is a long integer count of seconds or 
milliseconds, based upon some epoch. 

Through the use of scripts within web pages, or included in web pages, it 
will be understood that It is possible to update and manipulate the contents of the 
cookie profile without requiring any server side manipulation. In this case, each 
web page may call the same function in a single script file, which passes an 
enumerated Identity number that classifies the web page content, to update the 
profile cookie value. Alternatively, changes may be Initiated and/or carried out by 
computer programs ainnlng on the client, such as ActiveX controls or web-browser 
plug-ins. 



As a user browses multiple pages and HTTP requests are made for 
additional content, the profile of user behaviour held in the cookie on the client 
browser will change to represent the user pattern of Interests. This pattern is then 
audited, when the cookie Is sent as part of a request to a web server or may be 
accessed and used from within the web page or othenwise by the client computer. 
It is therefore possible to perform statistical analysis on the profile in order to 
identify content most suitable to be served to the user. In this way targeted content 
or targeted advertising content can be sensed to a user. In response to web page 
requests. A simple example of this targeting would be the ordering of page 
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content or navigation details on a page in accordance with preferences or 
weighted Importance expressed In the profile. 

Since the profile of user activity Is held In a cookie on the web browser of 
the client computing device, server-side storage requirements are minimised. 
According to RFC2029, each cookie can hold up to 4 kilobytes of Infonnation, 
which is sufficient to store at least 120 key and value field elements or pairs 
(dependent upon the precise make-up of the components of the value-field). If 
there is a requirement to extend the profile beyond these limits, the profile can be 
extended across multiple cookies, e.g. PR0FILE1, PROFILE2. Increasing the 
granularity of the profile in this way will improve the ability of the system to classify 
user behaviour. However, where there Is limited storage, older key and value 
pairs may be removed in order to make room for newer values. In this case, the 
older values, or older values with small value counts, are removed in preference to 
newer values. 

In another form of the invention, a second cookie is set on the client 
browser and operates in an identical fashion to that described above. A second 
profile included within the second cookie may be audited and removed by sender 
systems. Periodic removal in this way allows server systems to track usage 
between defined time periods associated with initial population and removal of the 
profile. Removal can also be limited to be perfonned only when particular 
resources are accessed. Thus, user Interests associated with access to that 
resource can be measured for a population of users. As an example, a dient 
browser may have the following profile Infomnatlon on access to a given server 

PROFILE=1002/10/TIME1:1899/imME2:2345/5mME3:7783/20mME4 
TRANSIENT_PROFILE=^1002/10mME1:1899/imME2 

Following access to the server, and auditing of the transient profile, the 
profiles might become: 



PROFILE=^1 002/1 1 /TIME1 :1 899/1/TIME2:2345/5/TIME3:7783/20/TIME4 
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In effect, a non-transient profile provides an historical record of user 
interests over an extended period. It is the purpose of a transient profile to allow 
recent user interests to be identified associated with a particular resource and thus 
to avoid re-counting users who have previously accessed the resource (i.e. 
outside the period of interest). If a non-transient profile were utilised for this 
purpose, previous access by users would be counted and an unrealistic count 
would be produced. 

It is thus clear that the present Invention may be Implemented solely 
through the use of server side processing, or through the combination of client and 
server side processing. Where server side processing Is used exclusively there Is 
no requirement for the use of client side processing, other than that involved In the 
transfer and storage of cookie information. Where client side processing is used 
for the maintenance and update of profile data there is no requirement for access 
to the server originating trie page content, and the client can therefore be served 
through web caches, or proxy servers. This malces the invention highly scalable 
and very efficient. However, direct server access will be required in order to audit 
profile Infonnation, unless such auditing is canied out direcUy by the client 
application. 

The present Invention is particularly, but not exclusively as has already 
been set forth, suited to Intemet environments for the monitoring of web pages 
and similar content forms. The profiles generated by the Invention audit a user's 
system behaviour and can be used to infer a usei's pattern of interests. In this 
way, the invention can be used to build profiles of user behaviour for those using 
intemet services such as web sites, for the generation of targeted page content, 
such as targeted advertising, for the targeted sale of goods or services and for 
logging and audit purposes. The invention has tiie advantage of anonymity, 
robustness and reduced sen/er side storage requirements. 
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It Will of couree be understood that the present invention has been 
described above purely by way of example, and that modifications of detail can be 
made within the scope of the invention. 
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CLAIMS:- 

1. A method of monitoring user usage patterns of a system, comprising the 
steps of: 

providing at least one state object, the object including a profile 
representative of user usage; 

storing the state object at a client location; 

passing, to a central server, the state object with each subsequent 
interaction initiation; and 

receiving, from the central server, the state object along with the response 
of the central server; 

wherein the profile Is modified to reHedt the Interaction between client 
location and central server. 

2. A method as claimed In daim 1, wherein the profile Includes at least one 
key and value-field pair. 

3. A method as claimed in claim 2, wherein the key is an identifier of a 
particular interaction type, and the value-field contains a count of the number of 
occurrences of that particular interaction type, 

4. A method as claimed in claim 3, wherein the value-field further contains a 
time component detailing the last modification of the interaction count and/or a 
time component detailing the creation of the key and value-field. 

5. A method as claimed In any preceding claim, wherein the at least one state 
object Is provided by the central server during the first interaction between the 
server and the client location. 

6. A method as claimed in claim 5. wherein the state object is provided as a 
part of the central server's response to a request for resources/infomiation 
submitted by the client location. 
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7. A method as claimed in any of claims 2 to 6, wherein the step of modifying 
the profile includes: . 

providing at least one further state object, the first state object comprising 
one or more key and value-field pair; and 

storing the at least one further state object at the client location. 

8. A method as claimed in claim 7, wherein the at least one further state object 
is prx)vided by the central server. 

9. A method as claimed in any of claims 4 to 8, wherein the modification of a 
profile includes one or more of: 

incrementing the count component of at least one key and value-field pain 
updating a time component of at least one key and value-field pair; 
adding at least one further key and value-field pair to the profile; and 
removing one or more key and value-field pair from the profile. 

10. A method as claimed In any preceding claim, wherein modification of the 
profile is earned out within the central server. 

11. A method as claimed in any of claims 1 to 10, wherein the modification of a 
profile is effected by one of one or more scripts within or included in 
information/resources provided to the client location by the central server, or one 
or more program executed at the client location, thus precluding manipulation of 
the profile by the server. 

12. A method as claimed in any preceding claim, wherein interaction between 
the client location and the central server occurs via the intemet; or other 
analogous mean^ 

13. A method as claimed in claim 12, wherein the central server further audits 
Ihe state object/profile provided to it. 
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14. A method as claimed in claim 13, wherein the central server performs 
analysis on the audited profile In order to direct services and/or information suited 
to the profile to the client location. 

15. A method as hereinbefore described with reference to and as shown in the 
accomjsanying drawings. 

16. A system configured to implement the method of any preceding claim. 

17. A module configured to monitor user usage pattems within a system, the 
module resident within the system, the system comprising: 

a central server; and 

at least one client location; 

the module comprising: 

means, within the central server, for generating at least one state 
object; and 

means for modifying a profile representative of system usage 
included in the state object to reflect interactions between the central server 
and client location; 

wherein the at least one state object is stored at the client location and 
passed between the client location and central server during interaction 
therebetween. 

18. A module as claimed in claim 17, wherein the profile includes at least one 
key and value-field pair. 

19. A module as claimed In claim 18, wherein the value-field contains an 
interaction count, and may further contain a time component detailing the last 
modification of the interaction count and/or a time component detailing the creation 
of the Icey and value-field. 

20. A module as claimed In either of claims 18 or 19, wherein the means for 
modifying includes: 
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means for incrementing a count which embodies a value of at least one key 

and value-field pain 

means for updating a time component of at least one key and value-field 

pain 

means for adding at least one further key and value-field pair to the profile; 

and 

means for removing one or more key and value-field pair finom the profile. 

21 . A module as claimed In any of claims 17 to 20, wherein modification of the 
profile is canied out within the central server. 

22. A module as claimed in any of claims 17 to 20, wherein modification of the 
profile is effected through one of one or more scripts within or included In 
information/resources provided to the client location by the central server, or one 
or more program executed at the client location thus precluding manipulation of 
the profile by the sender. 

23. A module as claimed in any of claims 1 7 to 22, wherein interaction between 
the central server and client location occurs via the internet; or other analogous 
means. 

24. A module as claimed In any of claims 17 to 23, further including means for 
auditing the profile, and for analysing the profile or user usage, such that 
Infomiatlon/servloes suited thereto may be provided to the client location by the 
(antral server. 

25. A module as hereinbefore described with reference to and as shown In the 
aix»mpanying drawings. 



26. A computer program product comprising a computer readable medium 
having stored thereon computer program means for causing a computer to cany 
out the method of any of claims 1 to 15. 
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